$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft File: WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft (raw, json) Hash identifier: NYV1Gx/ZzzzxN8EEGJqeo2lu32ShdzBjGf0k9JgWus8= Subject key identifier: F5:11:03:23:FE:14:91:0A:DE:1E:42:FD:BA:68:99:38:62:4F:8B:53 Authority key identifier: 58:0E:46:6B:7D:4F:A8:64:9D:2E:0B:27:37:5E:A2:86:C6:C5:45:84 Certificate issuer: /CN=A91C7B15/serialNumber=580E466B7D4FA8649D2E0B27375EA286C6C54584 Certificate serial: 01EF Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WA5Ga31PqGSdLgsnN16ihsbFRYQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft Manifest number: 01EC Signing time: Sun 10 Aug 2025 16:53:19 +0000 Manifest this update: Sun 10 Aug 2025 16:53:18 +0000 Manifest next update: Sun 17 Aug 2025 16:53:18 +0000 Files and hashes: 1: WA5Ga31PqGSdLgsnN16ihsbFRYQ.crl (hash: j+xlDM2f84xz+YrkwQDx7bl0HVNscSs/lZgFTsCeNbE=) 2: 04594232DEA011EE91181415C4F9AE02.roa (hash: ux/yn18OibC6Db2VOykrM0n0NcvF/7PYrwCoPjjFpC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.crl rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WA5Ga31PqGSdLgsnN16ihsbFRYQ.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 495 (0x1ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7B15, serialNumber=580E466B7D4FA8649D2E0B27375EA286C6C54584 Validity Not Before: Aug 10 16:53:18 2025 GMT Not After : Aug 17 16:53:18 2025 GMT Subject: CN=6898ce7e-4fc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:d9:12:21:97:38:d2:5c:41:e0:66:97:33:4e: 9c:70:c5:12:4b:7e:75:97:80:87:68:94:21:cf:69: d0:1b:77:fb:96:28:90:a1:43:e7:c3:fd:04:11:6a: 56:f2:14:a8:85:5f:88:90:e6:ee:46:c9:0c:8c:80: da:23:30:53:a7:d8:a6:a5:de:48:e4:69:9b:67:8b: d3:12:08:50:0e:03:4e:a1:0d:66:ed:72:93:b5:bd: 9d:6c:15:6b:59:57:70:84:b3:f3:e8:5d:58:b1:76: 4a:33:87:60:b8:59:a8:c9:a7:77:75:1e:52:64:ac: 6d:b1:d3:ed:21:13:d3:32:03:7c:d6:64:b6:1b:1b: 52:96:fa:19:b3:66:db:a5:d5:aa:62:b6:46:03:57: b8:06:5d:fc:27:ec:34:20:1d:a8:1e:11:e3:81:a5: 2c:f7:0f:73:2f:54:d9:41:64:64:90:d6:80:63:24: 21:9a:11:44:fe:d3:e4:08:20:83:78:3f:4d:69:8d: aa:9b:28:1e:e0:ce:5b:e7:6c:83:ed:f7:cb:5a:e9: 74:35:27:f5:50:ab:16:60:ca:52:b0:2d:51:76:38: 3c:71:4b:d0:56:0d:53:f1:70:18:02:a1:be:5a:5d: b3:6a:20:a3:87:b6:ab:f2:af:d9:fe:61:23:60:50: e3:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:11:03:23:FE:14:91:0A:DE:1E:42:FD:BA:68:99:38:62:4F:8B:53 X509v3 Authority Key Identifier: keyid:58:0E:46:6B:7D:4F:A8:64:9D:2E:0B:27:37:5E:A2:86:C6:C5:45:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WA5Ga31PqGSdLgsnN16ihsbFRYQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:8a:11:7d:65:35:45:bc:3c:60:fe:40:94:b8:dd:fd:ce:be: d9:52:93:f7:5d:95:8f:58:88:5b:5b:08:4b:78:5d:4f:ca:89: fb:d5:be:3c:22:7e:34:14:ef:0b:0f:51:fa:c2:7d:25:23:76: 77:c7:69:57:e5:f4:06:2d:4a:13:ca:2e:36:96:8b:af:09:e5: 68:5b:e0:be:2c:29:8d:17:fe:7e:c2:14:08:5e:e7:88:23:ba: 28:92:d4:d3:c6:db:77:42:7a:cc:b1:1a:6d:8d:c9:4d:99:ee: b3:6a:71:cd:a2:6b:45:5a:be:db:9a:1c:7d:84:b5:88:1f:eb: af:9a:6d:56:57:b9:ed:81:98:25:07:aa:43:46:3f:4d:32:01: f4:96:89:3e:6b:1c:b3:3f:61:ea:a2:3b:45:11:41:2f:bb:20: da:c5:17:d5:3b:1b:9d:f2:69:0b:78:75:43:2a:bf:43:d5:fe: 23:61:d4:50:1c:0c:ee:88:4e:1a:41:d0:8d:98:48:d7:f3:94: 2f:5a:3a:83:e0:bf:b4:41:6d:0b:f1:0d:bb:1a:97:06:c3:64: 70:7a:94:b0:1a:fc:4d:fe:9c:2f:a8:6b:d8:d6:f4:47:49:3c: e5:97:cb:7e:0e:72:d9:52:3c:27:ec:77:3c:2e:0b:36:dd:9a: b7:04:44:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdCMTUxMTAvBgNVBAUTKDU4MEU0NjZCN0Q0RkE4NjQ5RDJFMEIyNzM3NUVBMjg2 QzZDNTQ1ODQwHhcNMjUwODEwMTY1MzE4WhcNMjUwODE3MTY1MzE4WjAYMRYwFAYD VQQDEw02ODk4Y2U3ZS00ZmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8tkSIZc40lxB4GaXM06ccMUSS351l4CHaJQhz2nQG3f7liiQoUPnw/0EEWpW 8hSohV+IkObuRskMjIDaIzBTp9impd5I5GmbZ4vTEghQDgNOoQ1m7XKTtb2dbBVr WVdwhLPz6F1YsXZKM4dguFmoyad3dR5SZKxtsdPtIRPTMgN81mS2GxtSlvoZs2bb pdWqYrZGA1e4Bl38J+w0IB2oHhHjgaUs9w9zL1TZQWRkkNaAYyQhmhFE/tPkCCCD eD9NaY2qmyge4M5b52yD7ffLWul0NSf1UKsWYMpSsC1Rdjg8cUvQVg1T8XAYAqG+ Wl2zaiCjh7ar8q/Z/mEjYFDjLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPURAyP+ FJEK3h5C/bpomThiT4tTMB8GA1UdIwQYMBaAFFgORmt9T6hknS4LJzdeoobGxUWE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0IxNS8zMjZFQjBCNDhE RUIxMUVEOTNGQUFEMEZDNEY5QUUwMi9XQTVHYTMxUHFHU2RMZ3NuTjE2aWhzYkZS WVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1dBNUdhMzFQcUdTZExnc25OMTZpaHNiRlJZUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0IxNS8zMjZFQjBCNDhERUIxMUVEOTNGQUFEMEZDNEY5QUUwMi9XQTVHYTMxUHFH U2RMZ3NuTjE2aWhzYkZSWVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWihF9ZTVFvDxg/kCUuN39zr7ZUpP3XZWPWIhbWwhLeF1Pyon71b48 In40FO8LD1H6wn0lI3Z3x2lX5fQGLUoTyi42louvCeVoW+C+LCmNF/5+whQIXueI I7ooktTTxtt3QnrMsRptjclNme6zanHNomtFWr7bmhx9hLWIH+uvmm1WV7ntgZgl B6pDRj9NMgH0lok+axyzP2HqojtFEUEvuyDaxRfVOxud8mkLeHVDKr9D1f4jYdRQ HAzuiE4aQdCNmEjX85QvWjqD4L+0QW0L8Q27GpcGw2RwepSwGvxN/pwvqGvY1vRH STzll8t+DnLZUjwn7Hc8Lgs23Zq3BETH -----END CERTIFICATE-----Generated at Mon Aug 11 04:19:54 2025 by rpki-client